Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: lRVtFLDv8QGj0QuXOB150aLlwq+7KMC8bphBzzVsask=
Subject key identifier: 5B:E2:CE:FB:60:87:D0:3E:A9:D5:AF:71:97:40:0D:E2:E8:1F:8B:61
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 01984965B690BB656B5A11D2E3462D2B82AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 160E
Signing time: Sun 27 Jul 2025 01:00:59 +0000
Manifest this update: Sun 27 Jul 2025 01:00:59 +0000
Manifest next update: Mon 28 Jul 2025 01:00:59 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: C8YnX3vKAG5XVI2tHra7dzqsw7TtCpLJ8HQ3kn3zk3E=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b6:90:bb:65:6b:5a:11:d2:e3:46:2d:2b:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Jul 27 01:00:59 2025 GMT
Not After : Jul 28 01:00:59 2025 GMT
Subject: CN=5be2cefb6087d03ea9d5af7197400de2e81f8b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:41:14:d8:60:7e:cd:e4:53:98:91:90:2e:
ad:58:f2:58:06:c8:00:18:8d:99:61:72:f6:45:47:
71:c3:85:aa:d3:5b:ce:1c:97:3d:f7:ed:a8:fb:75:
cf:54:c0:ea:64:b8:e4:0e:98:27:49:1c:a7:e5:dc:
86:a2:04:17:a0:c2:4d:b5:b5:53:1d:c5:d0:d0:fe:
f8:fc:d2:7f:6a:e4:b2:4a:7c:e7:7c:4f:87:cc:f6:
ac:f7:24:33:7e:73:ee:11:26:77:a7:5f:28:b2:d2:
3e:1f:ac:24:0a:a1:98:aa:45:e7:6d:ff:0a:87:b1:
c8:05:05:d9:2c:f7:7e:6e:55:56:bb:47:01:ec:25:
f3:5a:6e:4b:80:42:39:1a:09:80:0f:04:9b:0c:7b:
7d:71:8e:59:e4:c9:73:ff:e1:7c:29:58:b6:ea:25:
fb:06:27:26:b7:1a:9b:d6:6d:ac:61:ec:09:c3:35:
a7:00:16:56:c7:ce:11:17:fe:dd:8d:ac:98:ea:a3:
98:9f:7c:71:80:13:79:f6:bc:a5:64:22:d3:11:6c:
14:98:98:39:18:0e:9e:dd:15:b1:55:03:7d:1e:a1:
b4:75:25:50:3c:93:79:57:b3:ff:eb:92:b3:0c:86:
78:f8:90:c2:77:26:20:18:10:5f:00:fd:63:d0:d3:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:CE:FB:60:87:D0:3E:A9:D5:AF:71:97:40:0D:E2:E8:1F:8B:61
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f3:a5:2c:b1:d1:15:d7:92:e9:1a:63:ef:e2:43:7e:96:8a:
6b:d8:a8:ba:02:b5:45:8e:20:44:2c:10:60:47:ef:09:7a:94:
71:b1:b6:e6:2b:0a:df:3e:4c:06:86:b1:f6:45:ac:63:3a:33:
24:3e:04:05:9a:0b:1e:30:5b:2a:3f:c3:34:9e:5d:18:1c:4b:
00:2c:33:13:cf:23:cf:52:c7:85:e0:a2:06:7c:a5:9d:ff:36:
0b:9f:c8:85:59:44:72:31:60:73:78:02:65:a0:f3:6b:f6:d1:
14:9d:01:90:e1:6c:e9:29:be:65:65:74:09:2a:13:ed:9f:ff:
19:ac:5e:fe:da:6d:4c:13:f7:3a:0c:98:4c:bd:38:07:2f:93:
fa:ac:23:2f:9c:f7:16:76:44:8c:be:94:8d:eb:e3:d9:fc:82:
d7:71:42:02:24:b5:de:54:08:2d:78:00:9f:f2:6f:c9:f6:cc:
a4:28:ed:3f:76:99:30:bb:53:a9:41:b5:d6:33:95:8b:2c:da:
50:69:e1:5d:c2:9c:9e:22:a3:e1:3e:2a:99:7f:e2:9d:24:d7:
e9:e3:c0:78:40:d5:13:17:94:38:b1:3d:dd:95:84:5e:99:98:
07:1a:b1:89:2c:0e:fe:0f:7c:a7:4b:0e:e8:9a:d9:c2:8c:c4:
6b:cb:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:22 2025 by rpki-client